123174 matches found
PYSEC-2026-3447
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unico...
AZL-92229 CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unico...
CVE-2026-59890
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unico...
CVE-2026-59890
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unico...
CVE-2026-12002
creationtimestamp| type| source ---|---|--- 2026-07-08 17:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq5mov46i522...
CVE-2026-55075
creationtimestamp| type| source ---|---|--- 2026-07-08 17:07:39+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mq5m7qsymz26...
CVE-2026-56401
creationtimestamp| type| source ---|---|--- 2026-07-08 16:47:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5l322mzs26...
CVE-2026-58656
creationtimestamp| type| source ---|---|--- 2026-07-08 16:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ks3mgr32k...
CVE-2026-9074
creationtimestamp| type| source ---|---|--- 2026-07-08 16:42:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5kryt5gx2v 2026-07-08 17:47:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ohuyub52l 2026-07-11 04:07:06+00:00| seen|...
CVE-2026-49147
creationtimestamp| type| source ---|---|--- 2026-07-08 16:41:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5kreqe252c...
CVE-2026-59873
creationtimestamp| type| source ---|---|--- 2026-07-08 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5kohrtec2b 2026-07-08 17:44:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5ob632iw2e 2026-07-11 03:37:07+00:00| seen|...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection via unsanitized data source input in the process. An attacker can execute arbitrary SQL commands and gain unauthorized access to sensitive data or create accounts with attacker-controlled credentials by influencing a...
CVE-2026-56298
creationtimestamp| type| source ---|---|--- 2026-07-08 16:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5kj564gz27...
MAL-2026-6996 Malicious code in ec-checker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8245936c8beb04bdb2bfe31a8117133823e3ffd6ed3e165d89b822dfab4a9c package.json declares a preinstall script that runs npm install @sentry/node && node examples/verify.js. examples/verify.js initializes the package's...
Malicious code in chai-redirection (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38236fbbdbbaa8f8ed9315c3a4ff01fbf049215896036b1cb68611681fe0eb00 chai-redirection presents itself as a chai assertion plugin but its main entry index.js unconditionally spawns a detached Node child process running...
CVE-2026-49145
creationtimestamp| type| source ---|---|--- 2026-07-08 16:30:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5k5n2qyc24...
Malicious code in rony-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873cd33646b64f2073cc37ed9649a3757fb8aa186d50f700cb8ad199196fd56c The package's main entry index.js collects installer identity data — os.userInfo.username, process.env.INITCWD || process.cwd, and os.hostname — and...
CVE-2026-56360
creationtimestamp| type| source ---|---|--- 2026-07-08 16:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5jpigfx22w...
CVE-2026-10699
creationtimestamp| type| source ---|---|--- 2026-07-08 16:19:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5jirczea2i 2026-07-08 20:15:09+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-678 2026-07-10 19:04:20+00:00| seen|...